PatchTheCVEericssonlg vulnerabilities
Recent CVEs affecting ericssonlg products. 5 tracked.
ericssonlg has 5 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 1. Most recent: 2020-08-25. Highest priority: CVE-2018-10285 (score 68/100).
- CVE-2020-7824 MEDIUM 6.5 UPGRADE A vulnerability in the web-based management interface of iPECS could allow an authenticated, remote attacker t
- CVE-2018-9245 CRITICAL 9.8 DOWNGRADE The Ericsson-LG iPECS NMS A.1Ac login portal has a SQL injection vulnerability in the User ID and password fie
- CVE-2018-15138 HIGH 7.5 DOWNGRADE Ericsson-LG iPECS NMS 30M allows directory traversal via ipecs-cm/download?filename=../ URIs.
- CVE-2018-10286 HIGH 8.8 DOWNGRADE The Ericsson-LG iPECS NMS A.1Ac web application discloses sensitive information such as the NMS admin credenti
- CVE-2018-10285 CRITICAL 9.8 DOWNGRADE The Ericsson-LG iPECS NMS A.1Ac web application uses incorrect access control mechanisms
FAQ
How do I fix ericssonlg vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ericssonlg being exploited right now?
None of the tracked ericssonlg CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ericssonlg CVE should I patch first?
CVE-2018-10285 currently ranks highest (68/100): The Ericsson-LG iPECS NMS A.1Ac web application uses incorrect access control mechanisms.